Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

27/12/2022, 20:06

221227-yvhddsbc8s 1

Analysis

  • max time kernel
    67s
  • max time network
    70s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    27/12/2022, 20:06

General

  • Target

    https://correotemporal.org/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 61 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://correotemporal.org/
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1324
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1324 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1156

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    61KB

    MD5

    fc4666cbca561e864e7fdf883a9e6661

    SHA1

    2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

    SHA256

    10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

    SHA512

    c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afc6ff5b6447b9fa2d9873f0d739cde6

    SHA1

    f3cdee0fbdb0fdab75bc0f25bb3af58ace1bffc7

    SHA256

    ea04403ae68c99146e0a54ea8788158deba1fc23b60fbf12f8c3ab9f89d424f0

    SHA512

    3d57cdaef28cb16b890893e305f9dc6e4308ce6140afcf681d7d1ef81ba632fe8b9633229de5746f1f454037d5471177d5fc991c7878ed6d234412f47ee515af

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\mlf2v8h\imagestore.dat

    Filesize

    36KB

    MD5

    4a36d71dbe6928efcb9e1b42c2b0e711

    SHA1

    44f15fc6b067a110c5cdbd0f23e7943a952f59a5

    SHA256

    9387b4b1a7bd45b69419cf38442ccd9bafdc432fc2b486590c9b3c6f8d774848

    SHA512

    b040335aaed948fd7f14871d3293d5f5423471c6ab10303365959e264714d3101dd51c1c8cd8523106a0ca0fca2661717988f9c4c58e0628930547dbc1875a77